A written commitment to every law firm that trusts us with their client data. What we protect, how we protect it, and what you are entitled to — from your first login to your last.
Your firm's data — client files, matter history, trust account records, billing history, communications, and documents — belongs to your firm. Not to konfidential.law.
We are the custodian of your data, not the owner. That distinction has real consequences: it means you have the right to access your data at any time, in a usable format, regardless of your subscription status. It means we cannot hold your data hostage, degrade access as leverage, or make it difficult to leave.
This guarantee exists because attorneys have ethical obligations to their clients that extend to the software they use. If your practice management software fails — or if you choose to leave it — your ability to continue serving your clients should not be compromised for a single day. We designed this guarantee around that obligation.
ABA Model Rule 1.15 requires attorneys to safeguard client property. We consider your client data to be client property held in your trust. Every provision in this guarantee is designed to support that obligation, not conflict with it.
This document makes four specific, enforceable commitments. Each is stated in plain language with a measurable standard.
Your complete data is exportable on demand at any time, from any paid plan. No support ticket required. No waiting period. Export includes all matters, clients, documents, billing records, trust ledger history, and communications in standard formats (CSV, PDF, JSON).
Upon cancellation of any paid subscription, your account enters a read-only grace period for a minimum of 90 calendar days. During this period, you retain full access to view, export, and download all firm data. No data is deleted or archived without written notice.
All firm data is backed up automatically every 24 hours with point-in-time recovery (PITR) enabled. In the event of any data loss — system failure, accidental deletion, or infrastructure incident — we can restore your data to any point within the previous 30 days.
In any data incident affecting your firm's records, we commit to notifying your firm administrator within 1 hour of detection, beginning recovery within 4 hours, and delivering a full written incident report within 24 hours of resolution.
The following table defines the measurable service levels we commit to for each plan tier. These are minimums — we aim to exceed them consistently.
| Metric | Small Firm | Mid Firm | Large Firm |
|---|---|---|---|
| Platform uptime (monthly) | 99.5% | 99.9% | 99.95% |
| Backup frequency | Every 24 hours | Every 24 hours | Every 12 hours |
| Point-in-time recovery window | 30 days | 30 days | 60 days |
| Recovery time objective (RTO) | 4 hours | 4 hours | 2 hours |
| Incident notification | Within 2 hours | Within 1 hour | Within 30 minutes |
| Data export format | CSV, PDF | CSV, PDF, JSON | CSV, PDF, JSON, custom |
| Grace period on cancellation | 90 days | 90 days | 180 days |
| Dedicated account contact | — | — | ✓ Named account manager |
Uptime is calculated on a rolling 30-day window, excluding scheduled maintenance windows announced at least 48 hours in advance. Scheduled maintenance is performed between 2:00–4:00 AM Eastern on Sundays when required.
Cancellation triggers a defined sequence of events. Nothing happens automatically or without notice.
Your subscription billing stops. All firm data remains fully accessible. You can view all matters, download all documents, export all records, and access your full billing and trust account history. No features are degraded — you simply cannot create new records.
Use the data export tools in your account dashboard to download everything your firm needs. We recommend exporting matters by practice area, then documents by matter, then trust account history as a separate ledger PDF. Support is available during this period at no charge to assist with migration.
Fifteen days before the grace period ends, your firm administrator receives a written notification via email with a reminder of the pending archival date, a one-click export link for all remaining data, and instructions for requesting a grace period extension if needed.
At the end of the grace period, your data is moved to cold storage — it is not deleted. Archived data is retained for an additional 12 months. Retrieval from cold storage can be requested within that window and will be delivered within 5 business days at no charge.
Fifteen months after your subscription ends (90-day grace + 12-month archive), a final deletion notice is sent. You have 30 days to respond before permanent deletion. If no response is received and no data is requested, deletion proceeds and a confirmation is sent.
We will never delete your data without written notice and a reasonable opportunity to retrieve it. If you receive a deletion notice and need more time, contact us and we will extend the archive period at no cost.
A data incident is any event that results in unauthorized access to, corruption of, or loss of firm data. The following protocol applies to all incidents, regardless of severity.
Upon detection of any incident, the affected system is isolated immediately. No other action takes precedence over containment. Automated monitoring triggers alerts to the on-call engineering team within minutes of anomaly detection.
Your firm administrator is notified via email and in-app notification within the timeframe defined in your plan's SLA table. The notification includes: what happened, what data may be affected, what we are doing about it, and your case reference number.
Data recovery begins from the most recent clean backup. Recovery progress is communicated to firm administrators every 60 minutes until restoration is complete. If recovery will exceed the RTO commitment, you are notified proactively with a revised estimate.
Within 24 hours of incident resolution, a written report is delivered to your firm administrator. It includes: root cause analysis, timeline of events, data affected (if any), remediation steps taken, and preventive measures implemented.
If an incident results in data loss that cannot be fully recovered, or if SLA response times are not met, affected firms receive a prorated credit equal to one month of their subscription fee. Credits are applied automatically — no claim is required.
In the event of a breach involving client personal information, we will comply with all applicable state and federal breach notification requirements and assist your firm in meeting its own notification obligations to affected clients.
Any provision of this guarantee can be invoked by the firm administrator directly — no legal process required. Here is how to exercise each commitment:
| Guarantee | How to invoke | Response time |
|---|---|---|
| Data export | Account dashboard → Settings → Export Firm Data | Immediate (self-serve) or 24hr if assisted |
| Grace period extension | Email support@konfidential.law with your firm name and account ID | Confirmed within 1 business day |
| Archive retrieval | Email support@konfidential.law within 12-month archive window | Delivered within 5 business days |
| Incident report | Delivered automatically — no action required | Within 24hr of resolution |
| SLA credit | Applied automatically to next billing cycle | Within 30 days of incident |
| Enterprise SLA addendum | Email legal@konfidential.law to request custom SLA documentation | Draft within 3 business days |
In the interest of full transparency, this section defines what this guarantee does not cover.
Force majeure. Events outside reasonable control — including natural disasters, widespread internet outages, acts of government, or third-party infrastructure failures (AWS, Cloudflare, Neon) — may affect uptime SLAs without triggering credits. We will communicate proactively and work to restore service as quickly as possible in all cases.
Free plan. Data portability and 30-day backup retention apply to free plan accounts. The 90-day cancellation grace period, incident SLA response times, and uptime guarantees apply to paid plans only. Free plan data inactive for 12 consecutive months will receive an archival notice before any action is taken.
Data you delete. Records permanently deleted by your firm's users through the application are not covered by backup restoration if the deletion was intentional. Accidental deletion can be recovered within the PITR window upon request.
Third-party integrations. Data held in connected third-party services (QuickBooks, Google Calendar, Outlook, etc.) is governed by those providers' terms and is outside the scope of this guarantee.
This guarantee is incorporated by reference into the konfidential.law Terms of Service. In the event of any conflict between this document and the Terms of Service, the more protective provision for the firm applies.
This guarantee is not a marketing document. It is a formal commitment made by the founder of this company, personally, to every firm that trusts us with their client data. It is reviewed annually and updated when our capabilities allow us to strengthen it — never to weaken it.
I built konfidential.law because I saw what happens when attorneys can't trust their software. This guarantee is the foundation of that trust — written, specific, and mine to stand behind.
Start your free trial. No credit card, no onboarding fee. And if you ever decide to leave, everything you brought in leaves with you.
Start free trial →